Heidisql vulnerabilities
Published CVEs affecting Heidisql products: 2 record(s), with severity, exploitation and fixes.
CVE-2018-25231
Medium · 5.5
CWE-98 Mar 30, 2026
HeidiSQL 9.5.0.5196 Denial of Service via Preferences
HeidiSQL 9.5.0.5196 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long file path in the logging preferences. Attackers can input a buffer-overflow payload through the SQL log file path field in Preferences > Logging to trigger an application crash.
CVE-2019-25598
Medium · 6.2
CWE-787 Mar 22, 2026
HeidiSQL Portable 10.1.0.5464 Denial of Service via Buffer Overflow
HeidiSQL Portable 10.1.0.5464 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the password field. Attackers can paste a buffer overflow payload into the password input during Microsoft SQL Server login to trigger an application crash.